Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: E3epeEU2G402tCqlfs7QMX6iQRBr3Oa2v5T7Fe3GwMA=
Subject key identifier: 2B:1C:2C:0C:E5:A6:25:F4:E2:78:BB:78:40:24:1F:FA:13:C1:D7:65
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 019769613A235BDAB4C9F4A59AB6275863A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:01:08 +0000
Manifest this update: Fri 13 Jun 2025 13:01:08 +0000
Manifest next update: Sat 14 Jun 2025 13:01:08 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: RHx4DSkZmDhgL75h1hq5APhhRUvAZvmk216L/xh38sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3a:23:5b:da:b4:c9:f4:a5:9a:b6:27:58:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: Jun 13 13:01:08 2025 GMT
Not After : Jun 14 13:01:08 2025 GMT
Subject: CN=2b1c2c0ce5a625f4e278bb7840241ffa13c1d765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:43:3d:b6:a4:84:e0:b0:9c:a8:46:37:f9:
0b:93:aa:c2:4d:fb:c7:cd:78:c4:90:5a:75:d9:67:
55:58:45:56:a6:eb:c4:ec:e2:ec:cb:89:02:d7:2f:
f9:04:ce:7f:3f:fd:b7:5f:40:00:39:ac:ac:0a:c8:
3a:34:2d:7c:9e:ea:a6:f5:11:43:9d:9d:f5:e3:cc:
18:46:c9:ea:92:4a:6e:11:98:75:c9:c6:fa:16:d3:
e6:79:e5:38:19:9c:fa:98:02:0f:cc:60:4a:2a:5b:
ca:0d:4c:53:fb:36:73:5d:82:15:e3:00:52:ec:ba:
4c:25:29:3f:e6:ae:f5:6e:b1:68:57:3f:a4:42:3f:
6d:95:e7:f9:b9:06:e6:3b:d8:ee:d5:fd:96:82:fb:
6b:90:49:7d:2b:2c:c4:a1:12:e8:64:43:22:ad:42:
44:3b:88:1f:35:f7:ff:cb:94:f7:23:2f:84:78:fc:
fb:62:d1:cf:97:75:ca:f5:49:8c:1d:20:fd:db:6a:
66:5c:45:ae:67:28:4d:69:61:c2:ec:0e:d1:78:5f:
6d:57:2e:9e:40:16:61:67:7e:e2:47:18:25:d9:e4:
d0:ae:92:cd:1f:5e:76:79:54:0a:9f:d7:b0:74:55:
16:01:0f:d4:fd:0d:41:2c:c0:47:b8:c1:5b:04:6e:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1C:2C:0C:E5:A6:25:F4:E2:78:BB:78:40:24:1F:FA:13:C1:D7:65
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a0:38:0a:24:4b:9d:e2:54:d6:32:99:be:a4:0e:a5:58:bb:
76:9c:49:7e:65:86:06:11:56:7e:4d:f3:89:e0:0f:31:bc:9c:
70:2b:6c:2e:28:7e:0d:ba:8b:ae:34:42:ad:94:0e:74:05:71:
ea:2c:b8:88:df:1c:aa:7e:75:d3:3e:a1:80:24:e0:32:45:1a:
30:52:13:13:19:19:e2:ce:45:7b:37:69:d5:a6:22:bf:42:58:
da:08:45:19:ab:7e:c7:62:19:0f:04:28:a5:71:50:54:b3:8f:
4a:ef:c4:c5:c4:be:c6:71:14:a5:d2:27:48:c0:c1:d9:ed:bc:
cc:26:28:a9:cb:20:72:aa:e7:cd:0f:c2:72:ba:93:e2:6d:d4:
3a:1c:1c:39:09:2c:25:65:d0:3e:65:8a:99:68:40:13:50:ee:
fe:bf:1e:ce:7a:e2:75:dc:2c:64:25:47:3f:4c:ce:9c:dd:2a:
17:7b:9f:c6:61:7a:d7:fc:f7:99:46:2a:06:c0:a5:4d:d9:a7:
01:b4:46:5d:8c:a4:6a:30:9e:55:b8:0d:43:8f:bb:20:2d:b4:
da:5c:8b:a0:04:d8:19:5b:5d:5e:86:b6:2f:21:40:5e:1a:1c:
bf:04:58:81:eb:6a:f3:5b:0e:9b:14:2f:20:c5:1b:17:b4:a6:
c2:16:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:31 2025 by rpki-client